Advanced php login
Hej jeg har et problem med mit login system, har nogle problemer med at få skittet til at virke.Når jeg logger ind stopper den på login ved print(hej5)?! den kommer bare ikke hvidre?!
Her er alle de sider jeg bruger i mit login.
Index.php
----------------------------------------------------------------
<form method="POST" action="login.php">
<p>Username:<input type="text" name="username" size="20"></p>
<p>Password: <input type="password" name="password" size="20"></p>
<p><input type="submit" value="Login" name="Submit"></p>
</form>
Login.php
----------------------------------------------------------------
<?php
print(Hej);
if ($_POST) { //If user has submitted data from form
print(Hej2);
if ($_POST['username'] == "" || $_POST['password'] == "") { //If any of the fields are empty
print(Hej3);
$error = "One or more fields are empty, please fill in all the fields";
} else { //Fields are not empty
session_start(); // Needed to initialise session variables (i.e. start session :D)
include_once("functions.php");
connectToDatabase();
$_SESSION['username'] == $_POST['username'];
$_SESSION['password'] == $_POST['password'];
header("location: protected.php"); //Redirect to protected.php, but can be whatever you want (your staff index page)
print(Hej5);
}
}
if (isset($_GET['id'])) {//if the id var exists in the url
print(Hej6);
$error = "One or more fields you have entered are incorrect, please try again";
}
?>
<?php
echo $error;
?>
functions.php
----------------------------------------------------------------
<?php
$database = "gamersloot_dk";
$dbusername = "gamersloot_dk";
$dbpassword = "120386";
$dbhost = "localhost";
function connectToDatabase() {
global $database, $dbusername, $dbpassword, $dbhost; //make the vars accessible from inside the function
$link = mysql_connect($dbhost, $dbusername, $dbpassword) or die('Could not connect: ' . mysql_error()); //connect
mysql_select_db($database) or die('Could not select database'); //select the db to use
}
function authenticateUser() {
session_start();
$query = "SELECT username FROM db_users WHERE username = '".$_SESSION['username']."' AND password = '".md5($_SESSION[password])."';"; //Select from database the username & password the user entered
$result = mysql_query($query) or die('Query failed: ' . mysql_error()); //Query the db
if (!mysql_num_rows($result)) { //If no match
header("location: login.php"); //redirect to login page
}
}
?>
protected.php
-----------------------------------------------------------------
<?
include_once("functions.php");
connectToDatabase();
authenticateUser();
?>
<html>
<head>
<title>Untitled Document</title>
</head>
<body>
<div>hej</div>
</body>
</html>
WTH is wrong=?!
